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Executive  Summary 


Recent  trends  in  System-on-a-Chip  show  that  an  increasing  number  of  special-purpose  processors 
are  being  added  to  improve  the  efficiency  of  common  operations.  Unfortunately,  the  use  of  these 
processors  may  introduce  suspension  delays  incurred  by  communication,  synchronization,  and  ex¬ 
ternal  I/O  operations.  When  these  processors  are  used  in  real-time  systems,  conventional  sched- 
ulability  analyses  incorporate  these  delays  in  the  worst-case  execution/response  time,  hence  sig¬ 
nificantly  reducing  the  schedulable  utilization. 

This  report  describes  schedulability  analyses  and  proposes  segment-fixed  priority  scheduling  for 
self-suspending  tasks.  We  model  the  tasks  as  segments  of  execution  separated  by  suspensions.  We 
start  from  providing  response-time  analyses  for  self-suspending  tasks  under  Rate  Monotonic 
Scheduling  (RMS).  While  RMS  is  shown  to  not  be  optimal,  it  can  be  used  effectively  in  some 
special  cases  that  we  have  identified.  We  then  derive  a  utilization  bound  for  the  cases  as  a  func¬ 
tion  of  the  ratio  of  the  suspension  duration  to  the  period  of  the  tasks.  For  general  cases,  we  de¬ 
velop  a  segment-fixed  priority  scheduling  scheme.  Our  scheme  assigns  individual  segments  dif¬ 
ferent  priorities  and  phase  offsets  that  are  used  for  phase  enforcement  to  control  the  unexpected 
self-suspending  nature. 
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1  Introduction 


Recent  trends  in  System-on-a-Chip  (SoC)  show  that  an  increasing  number  of  special-purpose 
processors  in  these  systems  are  added  to  improve  the  efficiency  of  frequently-used  operations  [5], 
For  example,  NVIDIA  offers  a  CUDA-compatible  mobile  processor  [10]  to  support  demanding 
operations  on  mobile  platforms.  Figure  1  illustrates  a  high-level  diagram  of  a  modern  SoC 
composed  of  various  subsystems  such  as  multimedia  and  modem  subsystems.  Unfortunately,  the 
use  of  such  special-purpose  processors  (a.k.a.  hardware  accelerators)  may  introduce  suspension 
delays  that  must  be  taken  into  account  in  a  schedulability  analysis  when  a  task  waits  for  a  shared 
resource  and  interacts  with  an  I/O  device  or  communication  interface.  Offloading  complex 
computations  to  hardware  accelerators  such  as  Digital  Signal  Processors  (DSPs)  or  Graphics 
Processing  Units  (GPUs)  can  cause  suspension  delays  as  well.  Many  conventional  real-time 
theories  [  1 7]  have  incorporated  the  delays  in  the  worst-case  execution/response  time  of  a  task  that 
suspends  itself1.  Even  though  the  analyses  can  guarantee  the  timeliness  of  systems,  the  analysis 
results  may  have  significant  pessimism.  A  pessimistic  analysis  is  not  desirable  in  a  compute¬ 
intensive  system  such  as  a  self-driving  car  that  we  have  recently  developed  [28].  Such  systems 
run  computation-demanding  algorithms  ranging  from  perception  [6]  to  planning  [19],  [9]  on 
GPUs  in  real-time.  In  this  case,  if  we  use  traditional  schedulability  analysis,  the  potential 
utilization  improvement  due  to  the  use  of  GPUs  is  eliminated  by  the  pessimism  in  the  CPU 
scheduling. 


Figure  1:  Modern  SoC  architecture. 

In  this  paper,  we  present  a  new  scheme  to  schedule  self-suspending  tasks  to  improve  their 
schedulable  utilization.  To  derive  our  new  scheme  we  first  study  the  schedulability  of  these  tasks 
under  Rate  Monotonic  Scheduling  (RMS)  [16]  that  is  widely  used  in  embedded  real-time  OSes 
like  OSEK  and  general-purpose  OSes  such  as  Linux.  RMS  is  also  known  to  be  the  optimal  fixed- 
priority  scheduling  policy  for  non-suspending  tasks.  Explicitly  modeling  self-suspending  real¬ 
time  tasks  is  desirable  to  remove  the  pessimism  described  above,  but  it  breaks  a  common 
assumption  of  RMS  that  tasks  do  not  suspend  themselves  during  run-time,  making  RMS  not 


1  To  be  more  precise,  the  self-suspension  durations  of  tasks  that  have  higher  priority  than  the  current  task  should 
also  be  incorporated. 
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directly  applicable.  Since  such  self-suspending  behaviors  can  cause  unexpected  jitters,  the  critical 
scheduling  instant  and  utilization  bound  test  defined  and  proved  in  [  1 6]  do  not  always  hold  for 
self-suspending  tasks.  Therefore,  RMS  is  not  an  optimal  scheduling  algorithm  for  this  type  of 
tasks.  In  other  words,  there  exist  other  scheduling  algorithms  that  can  schedule  tasksets  that 
cannot  be  scheduled  under  RMS. 

Research  on  self-suspending  tasks  is  limited.  In  [24]  the  authors  proved  that  the  problem  of 
scheduling  self-suspending  tasks  is  NP-hard  in  the  strong  sense.  There  has  also  been  recent  work 
on  scheduling  self-suspending  tasks  for  soft  real-time  systems  [15].  Table  1  shows  a  brief 
overview  of  related  research  on  scheduling  self-suspending  tasks  in  hard  real-time  systems  along 
with  the  problems  that  we  will  tackle  in  this  paper.  Detailed  related  work  can  be  found  in  Section 
5. 

1.1  Contributions2 

In  this  paper,  we  provide  schedulability  analyses  for  self-suspending  tasks.  We  first  provide 
response-time  analyses  for  the  highest-priority  self-suspending  task  and  non-suspending  tasks 
with  RMS  [16]  and  identify  the  conditions  when  RMS  can  be  used  without  modifications.  We 
then  derive  a  utilization  bound  as  a  function  of  the  ratio  of  suspension  time  to  the  task  period 
when  RMS  is  compatible. 


Table  1:  Overview  of  related  work  per  research  problem 


Assumptions 

Problems 

Uses 

enforcement 

Deadlines 

Arrivals 

Scheduler 

Work 

Comments 

Schedulability 

analysis 

No 

Constrained 

deadlines 

Periodic 

FPS 

[3] 

Schedulability 

analysis 

Yes 

Implicit 

deadlines 

Sporadic 

FPS 

[14] 

The  lowest  priority  task  can  suspend 
itself;  other  tasks  cannot. 

Schedulability 

analysis 

No 

Constrained 

deadlines 

Periodic 

FPS 

This 

paper 

The  highest  priority  task  can 
suspend  itself;  other  tasks  cannot. 

Utilization  bound 

No 

Implicit 

deadlines 

Periodic 

FPS 

This 

paper 

The  highest  priority  task  can 
suspend  itself;  other  tasks  cannot. 

Schedulability 

analysis 

Yes 

Constrained 

deadlines 

Sporadic 

SFPS 

This 

paper 

Phase  and 
priority 
assignment 

Yes 

Constrained 

deadlines 

Sporadic 

SFPS 

This 

paper 

Assignment  using  MILP;  it  is  not 
optimal  but  it  is  optimal  with  respect 
to  the  schedulability  test  used. 

Phase  and 
priority 
assignment 

Yes 

Constrained 

deadlines 

Sporadic 

SFPS 

This 

paper 

Heuristics 

2  This  paper  is  an  updated  version  of  our  previous  paper  published  at  RTSS'13  [13]  which  had  errors.  The  correc¬ 
tions  are  mainly  made  in  Sections  3.2  and  4.1 . 
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To  improve  the  schedulability  of  a  taskset  that  is  not  compatible  with  RMS,  we  propose  the 
segment-fixed  priority  scheduling  (SFPS)  that  decomposes  self-suspending  tasks  into  multiple 
segments  assigning  them  different  priorities  if  needed.  We  use  phase  enforcement  to  prevent 
jitters  [22],  [14], 

1.2  Organization 

The  rest  of  this  paper  is  organized  as  follows.  In  Section  2,  we  define  our  self-suspending  task 
model.  Section  3  provides  schedulability  analyses  for  self-suspending  tasks  when  a  task-fixed 
priority  scheduling  is  used.  Then,  in  Section  4,  we  propose  our  new  scheme  segment-fixed 
priority  scheduling  to  overcome  the  drawbacks  of  task-fixed  priority  scheduling.  Section  5 
presents  related  work.  Finally,  we  conclude  our  paper  and  discuss  future  work  in  Section  6. 
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2  System  Model  and  Assumptions 


Consider  a  constrained-deadline  sporadic  taskset  T:  ... ,  r,,}  of  multi-stage3  tasks  scheduled 

on  a  single  processor.  A  task  r,  generates  a  (potentially  infinite)  sequence  of  jobs.  The  arrival 
times  of  two  jobs  of  task  T;  are  separated  by  at  least  7)  time  units.  This  is  referred  to  as  a  sporadic 
model.  In  some  cases,  we  study  a  periodic  model  (which  is  a  special  case  of  the  sporadic  model), 
in  which  the  first  job  of  a  task  can  arrive  at  any  time  but  arrival  times  of  any  pair  of  consecutive 
jobs  of  t i  are  separated  by  exactly  7)  time  units. 

A  task  t i  consists  of  s,  computing  stages  (with  >  1)  with  suspension  between  consecutive 
computing  stages  and  each  stage  consists  of  a  single  segment  —  see  Figure  2.  Let  t y  denote  the 
jth  computing  segment  of  r ;.  The  times  at  which  Ty  becomes  ready  for  execution  are  the  times 
when  a  job  of  task  T;  arrives.  For  2  <  j  <  %  when  Ty_j  finishes  its  execution,  it  suspends  itself 
for  a  time  duration  that  lies  in  [Gyly,  Gy“*  ]  and  then  t y  becomes  ready  for  execution.  In 
Section  3,  we  assume  Gym  =  G^ax  and  for  short-hand  notation,  let  Gj j  =  Gym  =  Gyax.  In 
Section  4,  we  assume  Gym  and  Gy“x  can  take  non-negative  values  such  that  Gym  <  Gyax  and 
let  Gy  =  Gj^jax. 

For  each  job,  a  segment  Ty  executes  for  a  time  duration  that  lies  in  [0,  Cy].  The  response  time  of 
a  job  is  the  finishing  time  of  Ty.  of  the  job  minus  the  arrival  time  of  the  job.  The  worst-case 
response  time  of  a  task  T;  (denoted  /?;)  is  the  maximum  possible  value  that  the  response  time  of  a 
job  of  task  t j  can  take.  In  Section  3,  we  assume  that  Ty  always  executes  for  Gy .  In  Section  4,  we 
relax  this  assumption  so  that  the  execution  time  of  Ty  can  vary  between  0  and  Gy.  The  deadline 
of  T;  is  denoted  Dt.  If  Vr(-  6  T:  D;  <  7)  then  we  say  that  the  taskset  is  a  constrained-deadline 
taskset.  If  VTj  G  T:  DL  =Tt  then  we  say  that  the  taskset  is  an  implicit-deadline  taskset.  We 
consider  a  constrained-deadline  sporadic  taskset.  Our  goal  is  to  develop  scheduling  algorithms 
and  for  each  scheduling  algorithm,  develop  a  method  (schedulability  analysis)  that  computes  RL  or 
an  upper  bound  on  RL. 

For  convenience,  we  use  the  following  notations:  C;  =  H^=1  Cy  and  G,  =  Gy  and  Lt  = 

Ti  —  /?;.  We  also  assume  (with  no  loss  of  generality)  that  the  tasks  in  T  are  sorted  in  non¬ 
decreasing  order  of  T;  parameters,  that  is,  T1  <  T2  <  •••  <  Tn.  We  assume  that  all  computing 
segments  are  preemptable  with  insignificant  cost.  We  also  assume  that  the  cost  of  state  transitions 
between  computing  and  suspending  stages  is  negligible  on  a  processor. 


3  We  will  use  the  terms  'segments'  and  'stages’  interchangeably  because  there  is  exactly  one  segment  per  stage. 
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Figure  2:  A  multi-segment  self-suspending  real-time  task  model. 


2.1  Application  of  a  Multi-Segment  Self-Suspending  Real-Time  Task 
Model 


A  task  leveraging  GPU  can  be  modeled  using  a  multi-segment  self-suspending  real-time  task 
model.  For  example,  a  planning  algorithm  for  autonomous  driving  can  benefit  from  using  GPU  by 
calculating  numerous  potential  paths  in  parallel  [19].  The  motion  planning  algorithm  receives  its 
inputs  such  as  the  current  vehicle  status,  the  road  map  data,  and  a  list  of  obstacles  that  are  static  or 
dynamic.  The  preprocessing  for  motion  planning  (rpianl)  occurs  on  CPU,  and  the  processed  data 
are  transferred  to  the  GPU  to  generate  the  best  trajectory.  While  the  algorithm  runs  on  the  GPU 
(Gpian,i),  the  CPU  will  let  other  algorithms  run.  Once  the  best  trajectory  is  found,  the  output  is 
extrapolated  (t pian,2)  to  be  used  by  an  embedded  controller.  This  happens  repeatedly  every  Tpian 
units  of  time,  and  this  algorithm  can  be  represented  as  Tplan\  (( Cpianl ,  Gplanl,  Cplan2),  Tplan ). 
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3  Fixed  Priority  Scheduling  for  Self-Suspending  Tasks 


In  this  section  we  investigate  the  schedulability  of  tasksets  composed  of  periodic  self-suspending 
tasks  under  RMS.  We  first  consider  a  simple  taskset  composed  of  one  self-suspending  task  and 
one  non-suspending  task4.  Under  the  assumption  that  the  self-suspending  task  is  the  highest 
priority  task,  we  provide  a  response-time  test  and  derive  a  utilization  bound  with  rate-monotonic 
policy.  We  then  look  at  the  case  of  having  n  self-suspending  tasks.  To  simplify  our  discussion,  we 
assume  a  constant  gap  Gy  =  Gy-m  =  Gy“x  and  a  segment  t y  that  always  runs  for  Cy  units  of 
time. 


3.1  One  Self-Suspending  Task  and  One  Non-Suspending  Task 

Consider  a  taskset  Tlsln  with  one  self-suspending  task  and  one  non-suspending  sporadic  task.  Let 
t1ss  denote  the  self-suspending  task,  and  t2  is  the  non-suspending  task.  We  assume  that  the  self- 
suspending  task  has  the  highest  priority.  Then,  the  following  properties  are  satisfied. 

Theorem  1:  For  Tlsln,  a  critical  instant  happens  when  t2  arrives  at  the  same  time  as  one  of  the 
segments  of  t1ss. 


Proof.  A  critical  instant  for  t2  is  when  the  response  time  of  t2  is  maximized.  Since  t2  is  a  non¬ 
suspending  task,  a  processor  will  be  busy  during  the  execution  of  t2  including  preemptions 
incurred  by  t1ss.  Let  R\  denote  the  response-time  of  the  first  job  of  t2.  We  assume  that  the  first 
job  of  t1ss  arrives  at  the  time  origin,  and  (p2  denotes  the  release  time  offset  of  t2  to  the  time 
origin.  We  limit  the  range  of  < p2  between  0  to  T1  because  t1ss  is  periodic  and  the  time  origin  can 
be  transformed  to  any  of  the  time  instant  when  a  job  of  t1ss  is  released.  For  ease  of  notation,  we 
define  Ci  0  —  0  and  Gi  0  =  0.  Let  n(p2  denote  the  largest  integer  in  {n\(p2  —  £f_0  {Cl  i  +  Gy)  > 
0  and  n  E  Z0}.  Then,  R\  can  be  found  by  solving  the  following  equation. 


R\  = 


y5i 
^i= 1 


'Rl+<p2-ti=\  (Cy+Gy) 


r  Vn02  r 
LU  Li=0  Hi 


—mm 


(C1,y  +  Gw))  +  C2 


(1) 


Equation  (1)  calculates  the  length  of  busy-period  while  t2  is  being  executed  from  time  (p2  to  (p2  + 
R\ .  We  do  not  start  from  the  time  origin  because  the  processor  could  be  idle  while  t1ss  suspends 
itself.  That  is  why  we  subtract  the  executions  of  t1ss  from  the  time  origin  to  cp2,  where  the  first 
n(p2  segments  of  t1ss  are  executed  intact  and  the  (nfy  +  l)th  segment  may  or  may  not  fully  ran 
before  t2  arrives. 


4  'Periodic  tasks'  are  interchangeably  used  with  'non-suspending  tasks'  in  this  paper. 
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Processing 


Time 


Figure  3:  The  illustration  of  Equation  (1)  to  find  the  response  time  of  r2. 

The  solution  will  be  the  first  intersection  of  a  45°  line  (the  left-hand  side  of  Equation  (1))  and  a 
step  function  (the  right-hand  side  of  Equation  (1))  as  illustrated  in  Figure  3.  Although  the  solution 
cannot  be  obtained  easily  because  there  are  two  unknowns  with  one  equation,  we  can  find  a  useful 
property  of  the  equation.  With  respect  to  02,  the  term  that  subtracts  in  Equation  ( 1)  is  minimized 
only  when  02  -  (C1;-  +  Gx  J)  is  0.  Therefore,  02  can  be  selected  from  0,  CX1  +  GX1, 

Zy= i  (C1j  +  Gt  j ),  ...,  or  ZyL  /  (Cij  +  G1;)  when  t1ss  has  sx  segments.  Those  values  are  aligned 
with  the  release  time  of  each  segment  of  t1ss.  Then,  let  <T>2  denote  a  set  of  possible  values  of  < p2 
as  described  above. 

With  the  given  02,  R\  can  be  found  from  the  equation.  Let  f?2  (0)  denote  the  value  of  the 
response-time  of  t2  according  to  0.  max (pe<t>2Rl(cp)  is  the  worst-case  response  time  of  t2  because 
going  through  all  elements  from  <t>2  gives  all  the  possible  values  of  the  response-time  of  t2. 
Therefore,  for  rlsln,  a  critical  scheduling  instant  happens  when  t2  arrives  at  the  same  time  as  one 
of  the  segments  of  t1ss. 


From  Theorem  1 ,  we  can  derive  the  following  corollary. 

Corollary  1:  For  Tlsln,  the  worst-case  response  time  of  t2  is  given  as  R2  =  maxcpE(p2R2((p), 
where  02  is  a  set  that  has  each  segment  release  offset  of  the  first  job  of  t1ss  and  R2  (0)  returns  the 
response  time  of  t2  under  the  given  release  offset  0. 

Proof.  It  follows  from  the  proof  of  Theorem  1 . 


The  following  lemma  is  useful  because  the  worst-case  phasing  can  be  obtained  by  just  checking 
the  given  task  parameters. 

Lemma  1:  Consider  a  taskset  having  a  self-suspending  task  with  two  segments 

Tiss-  ((Ci,i,  Gl  lt  C12),  7j)  and  a  non-suspending  task  t2:  ( C2 ,  T2).  Then,  the  taskset  is  compatible 
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with  RMS  if  CX1  >  C12  and  C12  +  Lt>  CX1  +  G1X,  where  Tx  =  CX1  +  GX1  +  C12  +  Lx  because 
t1ss  is  the  highest  priority  task.  In  other  words,  the  critical  scheduling  instant  for  the  given  taskset 
happens  when  t1ss  and  t2  arrive  at  the  same  time. 


Proof.  Theorem  1  states  that  we  can  use  either  0  or  Clx  +  Glx  as  (p  for  t2  for  this  particular  case. 
Therefore,  Equation  (1)  becomes  equivalent  to  the  following: 


*2«0 


R2i(p)  +  (p 

C14  + 

R2icp)  +  (p  -  Clfl  -  G1X 

r  _ 

0 

r  _ 

(p  C±  \  ^11 

Ti 

Ti 

'-‘1,2 

Ti 

Ll,l 

Ti 

where  0  is  a  release  offset  of  t2  to  t1ss.  Since  we  assume  that  t 
could  be  either  0  or  C11  +  G11.  When  cp  is  0,  both 


because  0  <  (p  <T1.  Similarly,  if  c p  is  CX1  +  G1X 


CX1  and 


4>—C i,i— Gi.i 


lss  is  released  at  the  time  origin,  (p 

4>-c i,i~Gi,i 
T\ 

C12  becomes  0.  Then,  we  have  the 


C12  become  0 


following  two  equations: 


S2(02,,)  =  [*^1  Cu  +  Cl2  +  c2 

R2» 2.2)  =  ([MSsl±£!i±£ii|  _  i)  Cl  l  +  [M4m2|  Cli2  +  c2 


where  <p2,i  —  0  and  (p2  2  =  CX1  +  G1X. 


(2) 

(3) 


We  want  to  identify  conditions  where  R2(02,i)  —  ^2(02,2)  is  always  satisfied.  Let  /(x)  = 

[2-|  CX1  +  |  Cl^  — |  C12  +  C2.  Then,  the  right  hand  side  of  Equation  (3)  is  /(x  +  CX1  +  Gxf)  — 
C1X.  If  we  can  find  conditions  that  always  satisfy  /(x)  —  /(x  +  CX1  +  G1X)  +  GX1  >  0,  RMS  can 
be  used  without  any  modification  for  the  given  taskset.  Then,  we  can  have  the  following: 


fix )  -  fix  +  C14  +  G14)  +  C14  =  (l  +  £|  -  [X+Ci;i+CllD  C14  -  (£]  -  \X~\Gl1})  Cl, 2 


=  (1  +  £]  -  c14  -  (1  +  -  [^1)  c12 


(4) 


If  CX1  >  C12  and  C12  +  L1>  CX1  +  G14,  Equation  (4)  is  always  non-negative.  This  proves  the 
lemma. 


Since  Lemma  1  shows  the  property  only  when  CX1  >  C12,  it  would  be  useful  to  find  RMS- 
compatible  tasksets  that  having  a  self-suspending  task  satisfying  CX1  <  C12. 
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Cu  G,i  Cj_2  Lt 

l<  >l<  >l<  >l<  H 


Cl4 

Cm 

Cl2 

Ipt 

< 

0 

1  1 

“I  1  1  1 

< 

Tr 

Ti  lo  It, 

f2 


(a)  0  =  0  (b)  <p  -  C14  +  G14 

Figure  4:i?2  in  the  case  of{C11  <  C12)  A  (c14  <  C2<  Lf). 

Lemma  2:  Consider  a  taskset  having  a  self-suspending  task  with  two  segments 

Tiss:  ((Ci4,  Gljl(  C1>2),  Li)  and  a  non-suspending  task  t2:  (C2,  T2).  Then,  the  taskset  is  compatible 

with  RMS  if  C±1  <  C12  and  GX1  <  C2  <  L1. 

Proof.  When  G11  <  C2  <  L±,  the  task  t2  will  be  preempted  more  when  t2  is  aligned  with  the  first 
segment  of  t1ss.  The  task  t2  will  be  preempted  by  both  segments  of  t1ss,  but  t2  will  be  preempted 
only  once  if  it  is  aligned  with  the  second  segment  as  illustrated  in  Figure  4. 


ri:((l,2f,2),5) 
r2:  (<?,5  +  e) 
r3:  (3e,5  +  2e) 


i 

= 

0 

i — i  i — 
1 

< 

5 

— I  i  i — 
1 

~ 1 

t6  +  36 


t  t5  +  2c 


Figure  5:  An  exemplary  taskset ,  where  the  worst  case  phasing  between  x2  and  t1  is  different  from  the 
one  between  r3  and  t,  . 


3.2  One  Self-Suspending  Task  and  Many  Periodic  Tasks 

Although  we  extend  the  results  described  in  the  previous  section  to  understand  a  case  when  there 
are  one  self-suspending  task  and  many  non-suspending  tasks,  finding  a  critical  scheduling  instant 
is  not  trivial.  Consider  a  taskset  T  that  is  composed  of  three  tasks:  Tt:  ((l,2e,  2),  5),  t2:  (e,  5  +  e), 
and  r3:  (3e,  5  +  2s).  The  worst-case  response  time  of  t2  occurs  when  t2  is  released  with  the 
second  segment  of  t1  :  however,  this  is  not  the  case  for  t3.  Instead,  the  worst-case  phasing  occurs 
when  t3  is  aligned  with  the  first  segment  of  t1  as  depicted  in  Figure  5.  Therefore,  we  can  claim 
the  following  proposition. 

Proposition  1:  Consider  a  taskset  rls  that  has  one  self-suspending  task  and  n  —  1  non¬ 
suspending  tasks.  Let  t1ss  denote  the  self-suspending  task,  and  t,  a  non-suspending  task  when 
1  <  i  <  n.  We  assume  that  the  self-suspending  task  has  the  highest  priority.  If  i  <  j,  t,  has  a 
higher  priority  than  r;-.  We  let  <pl  denote  the  phasing  of  t,  and  t1ss  that  causes  the  worst-case 
response  time  of  t,.  Then,  (jf  may  not  be  the  same  as  (pj  when  i  <  j. 
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Algorithm  1:  CPU-Execution-Before-Arrival(r,  i,  0,) 

Input:  ris:  a  taskset  including  a  self-suspending  task  and  «— 1  non-suspending  tasks,  i:  a  task  index, 
0s  =  (4>2’4>3’  an  offset  vector 

Output:  Amount  of  CPU  execution  before  0;  from  jobs  of  tasks  that  have  higher  priority  than  r, 

1:  fl  :=  -  Es=o(Ci,s  +  Gls)  >  0  and  n  G  20} 

2:  n0i  :=  maxneCLn 

3:  >  Define  an  army  of  idle  times  between  0  and  0; 

4:  for  l  =  0  to  n^.  do 
5:  Idle[l]  •■=  Gx  l 

6:  ldle[n^t  +  l]  ==  max(0 ,0;  -  +  cu)  “  Ci,n*£+i) 

7 :  >  Consider  the  execution  times  of  non-suspending  tasks. 

8:  for  /  =  2  to  i  do 
9:  if  0;  <  0j  then 

10:  t>  Zef  m  he  an  integer  satisfying  (pl  =  X”I0(C1;-  +  G1;) 

11:  Et  :=  C, 

12:  for  p  =  mto  n^.  +  1  do 

13:  /d/e[p]  :=  7d/e[p]  —  Et 

14:  if  Idle\p\  <  0  then 

15:  Ei  :=  — 7d/e[p]  and  Idle [p]  :=  0 

16:  else 

17:  break 

18:  return  0;  —  /dte[y] 

We  assume  that  the  first  job  of  t1ss  arrives  at  the  time  origin.  Let  <l>lss  denote  a  set  of  arrival 
times,  where  each  arrival  time  is  a  time  instant  when  a  segment  of  the  first  job  of  t1ss  is  released. 

In  other  words,  <blss  =  {0,  (CX1  +  G11'),  (Cjj  +  G1;)}.  We  also  define  a  function 

7?i(0i)  that  returns  the  response  time  of  T,,  where  0p  (02, 03, ... ,  0j)  is  a  (i  —  l)-dimensional 
vector  for  i  >  2.  Each  element  of  0(  is  an  arrival  offset  to  the  arrival  of  t1ss  of  a  non-suspending 
task  t;-,  V;  G  {/[/  G  Z+andl  <  j  <  t}-  The  actual  value  of  each  element  is  one  of  the  elements  in 
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<t>lss.  When  i  >  2,  the  actual  value  of  /?[(</>, )  can  be  obtained  by  solving  the  following  equation 
that  is  extended  from  Equation  (1). 


Ritid  =  ci  +  j%=1  [Ri(^)+0i-y(Cl'fc+Gl'fc)|  Cu  +  [gi^ii^l  c,- 


Rim 


(5) 


where  E;  (</>;)  is  CPU  execution  time  incurred  by  tasks  that  have  higher  priority  than  T;  between 
the  time  origin  and  the  time  when  arrives.  Ei(cpi)  can  be  found  using  Algorithm  1.  For  ease  of 
notation,  we  use  Ci  0  =  0  and  Gi  0  —  0.  Equation  (5)  is  similar  to  Equation  ( 1 )  except  that  it 
considers  more  non-suspending  tasks.  Ei((pi)  of  the  right-hand  side  of  Equation  (5)  comes  from 
the  fact  that  the  tasks  that  have  higher  priority  than  t,  can  have  different  release  offsets.  The 
solution  of  Equation  (5)  can  be  obtained  using  Algorithm  2.  By  going  through  all  possible 
combinations  of  < ,  we  can  find  the  worst-case  response  time  R[  of  t ,.  If  <  Dt,  r,  is 

schedulable. 


Although  we  can  find  the  schedulability  of  Tls,  the  exponential  complexity  of  the  given  algorithm 
is  not  desirable.  Lemmas  1  and  2  give  useful  intuitions  in  this  case,  where  a  critical  scheduling 
instant  for  a  taskset  can  be  identified  by  looking  at  task  parameters.  If  the  critical  instant  is  when 
all  the  tasks  arrive  at  the  same  time,  the  traditional  fixed  priority  scheduling  properties  can  be 
applied.  In  other  words,  the  lemmas  can  help  us  with  easily  classifying  a  taskset  with  a  self- 
suspending  task  into  a  category  that  RMS  can  be  used  without  any  modification. 


Algorithm  2:  Response-Time(r,  i,  (pL ) 

Input:  ris:  a  taskset  including  a  self-suspending  task  and  n  —  1  non-suspending  tasks,  i:  a  task  index, 
=  (02i  03*  ■■■  0i)  •  offset  vector 

Output:  The  response  time  of  under  0, 

1:  t>  Calculate  the  initial  condition  for  Tj. 

2:  £’i(0!)  :=  CPU-Execution-Before-Arrival(r,  i,  0,) 

3:  W?  :=  Z^Cij  +  ZUCj 

4:  l  :=  0 

5:  while  W/+1  A  W-  do 
6:  t>  From  Equation  (5) 

h .  wl+l  ._  r  ,  vsi  K+^-EL1o(C1,k+C1,k)l^  vi-1  r  r? 

7 ■  wi  -  ct  +  lij= 1  - T, -  C1J  +  *J= 2  — Yj —  Li  - 

/  i=  Z  +  1 
9:  return  W/ 
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In  this  section,  we  assume  that  ( 1 )  a  taskset  ris  has  only  one  self-suspending  task  that  has  the 
highest  priority,  (2)  self-susp ending  times  between  computing  stages  are  fixed,  and  (3)  execution 
time  of  each  computing  segment  is  same  as  the  worst-case  execution  time.  Therefore,  the  self- 
suspending  behavior  of  task  t1  can  be  modeled  as  sporadic  events  with  minimum  inter-arrival 
time.  That  is,  if  the  jth  computation  segment  of  task  t1  starts  its  execution  at  time  t,  the  earliest 
time  for  this  computation  segment  to  be  executed  again  in  the  next  job  of  task  is  at  least  t  +r1. 
Therefore,  we  can  conclude  the  following  lemma: 

Lemma  3:  For  a  taskset  rls  with  (1)  one  self-suspending  task  as  the  highest-priority  task,  (2) 
fixed  self-suspending  time,  and  (3)  the  actual  execution  time  of  the  self-suspending  task  always 
equal  to  the  worst-case  execution  time,  a  constrained-deadline  task  Tk  can  be  feasibly  scheduled 
by  the  fixed-priority  scheduling  strategy  if  Cj  +  Gx  <  Dx  and 

30  <t<  Dk,  Ck  +  Y.i=: i  f^|  Ci  <  t  for  2  <  k  <  n.  (6) 

Proof.  The  condition  Cj  +  Gt  <  Lf  is  to  ensure  the  feasibility  of  T1  .  The  assumption  that  the  self¬ 
suspension  always  has  fixed  suspending  time  leads  to  the  condition  that  the  minimum  inter-arrival 
time  of  each  computation  segment  of  Tt  is  Tj.  Therefore,  we  can  treat  each  of  them  as  a  sporadic 
task  with  period  Tj.  Moreover,  since  all  of  them  have  the  same  period  Tj,  we  can  further  merge 
them  as  a  single  task  with  execution  time  C1  and  period  7j.  Therefore,  we  can  use  the  time- 
demand  analysis  in  Equation  (6)  for  testing  the  schedulablity  of  task  Tk. 


That  is,  in  the  taskset  Fis,  self-suspension  does  increase  the  difficulty  of  performing  schedulability 
analysis  as  compared  to  performing  schedulability  analysis  of  ordinary  sporadic  tasks.  We  have 
the  following  corollary. 

Q 

Corollary  2:  Suppose  that  y  —  —  (is  given  with  0  <  y  <  1).  For  a  taskset  rls  with  implicit 

Ti 

deadlines  and  7j  <  Tj  <  ■■■  <  Tn,  7js  is  schedulable  by  RMS  if  Cj  +  G1  <  Tj  and  the  total 
utilization  of  the  taskset  is  less  than  or  equal  to  n  ^2 n  —  1  where  n  is  the  number  of  tasks  in  rls- 

Q 

With  the  above  corollary,  we  can  further  build  the  utilization  bound  based  on  the  factor  y  —  — .  If 

Ti 

G1  is  close  from  7j,  C1  cannot  be  large  with  respect  to  Tx  because  Cx  +  <  T1.  If  y  is  large,  to 

ensure  the  feasibility  of  task  tx,  the  available  execution  time  of  task  is  also  limited. 

Corollary  3:  For  a  taskset  7js  with  implicit  deadlines  and  Tj  <  Tj  <  •••  <Tn,  I js  is  schedulable 
by  RMS  if  U1  <  1  —  y  and  nlf1(Ui  +  1)  <  2,  where  n  is  the  number  of  tasks  in  f.s- 

Proof.  This  comes  from  Lemma  3  to  satisfy  Cj  +  G±  <  Tt  and  Equation  (6).  Since  the  test  in 
Equation  (6)  is  identical  to  the  case  with  n  sporadic  tasks  with  given  utilization  U1,  U2, ... ,  Un,  we 
can  use  the  hyperbolic  bound  flf=1(l/j  +  1)  <  2  from  [2]. 


We  can  then  derive  the  following  theorem. 


CMU/SEI-2016-TR-002  |  SOFTWARE  ENGINEERING  INSTITUTE  |  CARNEGIE  MELLON  UNIVERSITY 
Distribution  Statement  A:  Approved  for  Public  Release;  Distribution  is  Unlimited 


12 


Q 

Theorem  2:  Suppose  that  y  =  —  (is  given  with  0  <  y  <  1).  For  a  taskset  rls  with  implicit 

Ti 

deadlines  and  Tt  <  T2  <  ■■■  <  Tn,  fls  is  schedulable  by  RMS  if  U1  <  i  —  y  and 


/n( 2«-  l) 


if  Y  <  2 
otherwise 


2  n 


(7) 


Proof.  For  the  rest  of  the  proof,  we  explain  how  to  obtain  the  utilization  bound  in  Equation  (7). 
Our  objective  is  to  find  the  infimum  Hf=i  Ui  such  that  U1  <  1  —  y  and  n f=1(t/[  +  1)  >  2.  There 


are  two  cases:  (1 )  If  2T  —  1  <  1  —  y,  then  by  following  the  analysis  of  the  Liu  and  Layland  bound 
[16],  the  utilization  bound  is  Yf=1  Ui  =  n  (2 n  —  1  j  with  U1  =  (2 n  —  1  j  <  1  —  y.  (2)  If  2«  —  1  > 
1  —  y,  the  the  infimum  Hf=1  I/;  is  a  solution  with  U1  —  1  —  y.  Together  with  the  fact  that  the 
geometric  mean  n~\jU^=2{Ui  +  1)  is  no  more  than  the  arithmetic  mean ; 


n- 1 


n- 1 


L+l, 


we  have 


IL  IL 

2  <  ]~ [  (yi  +  l)  =  (2  —  y)  ]~ [  (Ui  +  1) 

i=l  i-2 


<(2-7) 


gU  Ut 

n  —  1 


+  1 


n- 1 


U1  +  ^Ui>(l-y)  +  (n-  1)  ~  1 


By  considering  the  above  two  cases,  we  reach  the  conclusion. 


It  is  also  important  to  emphasize  that  the  actual  utilization  bound  is  min  |l  —  y,n  [2»  —  1 J  j 

instead  of  the  bound  in  Equation  (7)  if  U1+y  <  1  is  not  listed  in  the  testing  condition.  The  bound 
1  —  y  is  due  to  the  constraint  of  the  maximum  utilization  of  the  self-suspending  task  t1  . 

The  analysis  in  this  section  can  only  be  applied  when  the  self-suspension  patterns  are  defined  with 
fixed  segmentations  and  with  controlled  suspension  lengths.  If  a  self-suspension  interval  can  be 
shorter  than  the  specified  length,  the  analysis  in  Lemma  3  cannot  be  applied.  Some  jitter  terms 
have  to  be  considered.  It  is  also  not  difficult  to  see  that  the  utilization  bounds  in  Equation  (7)  can 
still  be  improved  by  adopting  more  precise  analysis  than  that  in  Lemma  3.  For  the  target  case  with 
one  self-suspending  task  at  the  highest-priority  level,  we  can  convert  this  task  into  a  generalized 
multi-frame  task  [1].  Then,  the  schedulability  analysis  can  be  done  directly  by  using  the  test 
proposed  by  Takada  and  Sakamura  [26].  The  generalized  utilization-based  schedulability  test 
framework  developed  by  Chen,  Huang,  and  Liu  [4]  can  be  easily  applied  to  improve  the 
schedulability  used  in  Equation  (7)  by  generating  n  different  utilization-based  schedulability  tests 
based  on  the  pseudo-polynomial-time  test  in  [26]. 
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The  assumption  that  the  actual  execution  time  should  be  always  the  same  as  the  worst-case 
execution  time  for  the  self-suspending  task  is  only  for  being  self-contained  and  the  simplicity  of 
presentation.  Such  an  assumption  can  be  easily  removed  because  the  analysis  in  Lemma  3  anyway 
merges  all  the  computation  segments,  and  hence  in  the  proof  of  Theorem  2. 

3.3  Many  Self-Suspending  Tasks 

We  now  consider  a  taskset  that  has  many  self-suspending  tasks.  In  the  previous  section,  we  have 
shown  that  finding  the  worst-case  response  times  of  lower-priority  non-suspending  tasks  is  not 
trivial  because  all  results  from  all  the  possible  phases  need  to  be  compared  against  each  other 
except  for  some  special  cases  that  we  have  identified.  Therefore,  having  many  self-suspending 
tasks  makes  the  scheduling  problem  intractable.  In  addition,  the  conventional  fixed  priority 
scheduling  such  as  RMS  does  not  account  for  a  different  timing  requirement  per  segment.  For 
example,  if  there  is  a  relatively  long  suspension  time  between  two  segments  of  a  lower  priority 
task  and  the  completion  time  of  the  second  segment  is  close  enough  to  its  deadline,  the  task  may 
not  easily  meet  its  deadline. 

Consider  a  taskset  that  is  composed  of  two  self-suspending  tasks:  x1  :  ((1,1,1), 5)  and  t2: 

((2, 5, 2), 10).  The  executions  of  x1  and  t2  with  RMS  are  illustrated  in  Figure  6.  The  boxes  filled 
with  horizontal  lines  represent  xlf  and  the  boxes  filled  with  diagonal  lines  represent  t2.  The 
release  of  each  job  is  also  depicted  below  the  time  axis  to  show  the  different  phasing  behaviors. 

By  extending  Proposition  1 ,  we  can  understand  that  we  need  to  consider  four  different  phases. 

The  case  when  x1±  and  x21  arrive  at  the  same  time  is  depicted  in  Figure  6  (a).  The  case  when  t12 
and  r21  arrive  at  the  same  time  is  illustrated  in  Figure  6  (b),  where  Tl  t  and  x22  are  also  released 
at  the  same  time  at  time  10.  The  case  when  r12  and  r2  2  are  released  together  cannot  exist  for 
Figure  6.  Since  x1  has  the  shortest  period,  it  has  the  highest  priority.  As  shown  in  Figure  6, 
regardless  of  different  phases,  t2  always  misses  its  deadline.  This  happens  because  the 
conventional  fixed  priority  scheduling  does  not  consider  the  suspension  time  between  segments. 
For  example,  t2  has  only  5  units  of  time  to  execute  for  4  units  of  time  due  to  5  units  of  suspension 
time. 

One  possible  way  of  resolving  this  issue  is  to  assign  a  segment  that  requires  a  faster  execution  a 
higher  priority.  Figure  7  illustrates  the  execution  behaviors  of  x1  and  t2  when  r21  has  the  highest 
priority,  xlx  and  x12  are  assigned  the  priorities  in  the  middle,  and  x2  2  is  assigned  the  lowest 
priority.  As  shown  in  Figure  7,  x2  meets  its  deadline,  and  the  given  taskset  is  schedulable  with  the 
proposed  scheduling  method. 


?2  f  Deadline  miss— ^  ^2  “f  Deadline  miss— ^ 


(a)  (b) 

Figure  6:  Scheduling  t1:  ((1,1,1), 5)  and t2:  ((2,5,2),  10)  with  rate  monotonic  scheduling. 
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t2 


(a)  (b) 

Figure  7:  Scheduling  t1  :  ((1,1,1), 5)  and  t2  :  ((2,5,2), 10)  with  segment-fixed  priority  scheduling. 
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4  Segment-Fixed  Priority  Scheduling 


We  propose  the  segment-fixed  priority  scheduling,  where  we  decompose  a  sporadic  self- 
suspending  task  into  multiple  segments  and  assign  them  different  priorities.  In  this  section,  we 
also  relax  the  assumption  of  a  constant  gap  that  was  made  in  Section  3  so  that  G/j"  <  G^ax  is 
allowed.  In  other  words,  the  suspension  time  can  vary  during  run-time,  but  it  is  bounded. 
Although  this  is  a  more  realistic  assumption,  varying  suspension  time  easily  makes  the  analysis 
intractable.  We  have  shown  that  different  phases  among  tasks  need  to  be  considered,  so  the 
varying  suspension  time  gives  myriads  of  different  phase  differences.  This  ends  up  being  hard-to- 
predict  jitters  in  tasks.  This  issue  can  be  avoided  by  leveraging  a  phase  enforcement  scheme  [22], 
[14],  which  guarantees  that  a  computing  segment  of  a  self-suspending  task  t ;  arrives  after  an 
offset  of  <fii  time  units  from  the  arrival  of  a  job  of  the  task.  Hence,  a  segment  does  not  arrive 
before  its  enforced  phase  time.  We  also  allow  the  execution  time  of  t ij  can  vary  between  0  and 
Cij.  We  first  provide  an  non-optimal  method  to  determine  phases  and  priorities  to  support 
segment-fixed  priority  scheduling;  it  is  optimal  with  respect  to  the  schedulability  test  used  though. 

4.1  Schedulability  analysis  and  optimal  configuration  with  MILP 

In  this  section,  we  will  initially  assume  that  priorities  and  phases  (0)  are  given.  We  will  construct 
a  Mixed-Integer  Linear  Program  (MILP)  such  that  if  this  MILP  is  feasible  then  the  taskset  is 
schedulable.  This  gives  us  a  sufficient  schedulability  test.  We  will  then  use  this  MILP  to  obtain  a 
configuration  of  priorities  and  0.  In  MILP  expressions,  we  let  {x..y}  denote  the  set  of  integers  >  x 
and  <y.  And  we  let  s.t.  mean  such  that. 

We  will  consider  tasks  where  each  task  has  multiple  segments  and  we  let  sL  denote  the  number  of 
segments  of  task  T;.  Since  the  first  segment  of  a  task  arrives  when  a  job  is  released,  the  phase  of 
this  segment  is  zero.  So  we  only  need  to  specify  s,  —  1  offsets  for  task  t*.  Consequently,  the 
release  time  of  the  sth  segment  of  task  T;  is  denoted  by  0is_1.  Let  maxprio  denote  the  number 
of  priority  levels  available.  If  we  do  not  specify  this  explicitly,  we  assume  that  maxprio  = 

Xf=i  Si  because  this  is  enough  for  making  it  possible  for  each  segment  to  have  its  unique  priority. 
We  assume  that  if  we  do  not  specify  the  domain  of  a  variable  then  its  domain  is  non-negative  real 
number.  Let  Ri  s  denote  the  response  time  of  the  sth  segment  of  task  tl  (the  response  time  is 
counted  from  the  arrival  time  of  the  job  —  not  the  arrival  time  of  the  segment  of  the  job).  Let 
RUBi  s  denote  an  upper  bound  on  Ri  s.  Let  yiiSiP  =  1  indicate  that  the  sth  segment  of  T;  is 
assigned  priority  level  p;  otherwise  yiSiP  =  0.  Let  Xisjsr,  =  1  indicate  that  the  priority  of  the 
s"th  segment  of  task  t;-  is  greater  than  or  equal  to  the  priority  of  the  sth  segment  of  task  t,; 
otherwise  XiiSjs,,  —  0. 

For  convenience,  let  us  introduce: 


VTj  G  f:  0£fO  =  0 


Monotonicity  of  offsets  gives  us: 


VT;  G  T,VS  G  {L.Sj  -  1}:  01,5-!  <  0i,s 


(8) 

(9) 
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Since  a  segment  of  a  task  has  exactly  one  priority  level: 

vt;  g  r,vs  g  {i..Si}:Z™ri0  yiAp  =  i  do) 

We  require  that  the  taskset  is  schedulable.  The  last  segment  must  finish  by  its  deadline  and  all 
other  segments  must  finish  at  a  time  so  that  there  is  enough  time  until  the  next  segment  of  the 
same  task  arrives.  Hence: 


VTj  G  r:  (Vs  G  {l..S£  —  l}:RUBls  +  Gls  <  $jS)  A  (RUBis.  <  D{)  (11) 

The  fact  that  xiiSjsr,  indicates  priority  relationship  gives  us: 

VTj  G  r,  Vt;-  G  T,  Vs  G  {l..Sj},  Vs"  G  {l-.Sy},  Vp  G  {1 .  .maxprio}, 

Vp'  G  {1.  .maxprio]  s.  t.  (J  i)  A  (p  <  p')\ 

(.(.Yi.s.p  —  1)  A  ( yj,sn,pi  —  1))  ( xi,s,j,su  —  1)  (12) 

We  can  now  express  an  upper  bound  on  the  response  times  as  follows: 

VTj  G  T ,  Vs  G  {1. .  S;}:  RUBis  —  4>i:S-±  +  wijS  (13) 

VTj  G  r,  Vs  G  {1. . Sj}:  WjiS  =  CUs  +  ST.e  rA^j  Ii}Sj  (14) 

where  7j  SJ-  is  an  upper  bound  on  the  interference  that  Tis  suffers  from  Tj . 


In  normal  response-time  calculations,  one  computes  the  interference  on  Tj  from  all  higher-priority 
tasks.  In  our  model,  however,  a  task  Tj  can  have  multiple  segments  so  that  some  of  the  segments 
of  Tj  have  higher  priority  than  the  sth  segment  of  task  Tj  and  other  segments  of  Tj  have  lower 
priority  than  the  sth  segment  of  task  Tj.  For  this  reason,  when  we  compute  the  interference  that  a 
given  segment  of  Tj  suffers  from,  we  compute  it  based  on  all  other  segments  from  all  other  tasks 
and  add  up  all  terms.  Some  of  these  segments  of  other  tasks  will  have  lower  priority  than  the 
segment  of  task  Tp,  these  will  have  zero  terms.  That  is,  in  some  terms  /j  S  j  may  be  zero. 

We  would  like  to  compute  h,s,j-  One  can  note  that  this  is  constituted  of  two  types  of  execution  (i) 
carry-in  execution  and  (ii)  non-carry-in  execution.  The  former  is  execution  of  a  segment  of  t;-  that 
delays  the  segment  Tj  s  and  this  execution  comes  from  a  segment  of  Tj  that  arrives  before  the 
segment  Ti  s  arrives.  The  latter  is  execution  of  a  segment  of  Tj  that  delays  the  segment  Ti  s  and  this 
execution  comes  from  segment(s)  of  Tj  that  arrive  not  before  the  segment  Ti  s  arrives.  In  order  to 
discuss  carry-in  and  non-carry-in  execution,  let  us  define  the  function  prec(s',/)  as  follows:  if 
s'  =1  then  prec (.■?',/)  =  Sj  else  prec(s',/)  =  s'  —  1.  Intutively,  the  function  prec(s',;)  finds  the 
segment  that  precedes  segment  s'  of  task  t j. 


Consider  those  segments  of  task  t j  that  arrive  after  Ti  s  arrives.  Among  those,  consider  the  one 
with  the  earliest  arrival  let  and  let  s'  be  its  segment  index  of  task  Tj.  Hence: 


VTj  g  r, vs  g  {i..Sj}, vt.-  g  r s. t.j  a 


Iisj  —  max  ^(CIexec-'Sj  +  NCIexecf's j)  (15) 


Carry-in  from  task  Tj  can  only  happen  from  a  single  segment  of  task  t j  and  only  if  this  segment 
has  priority  that  is  higher  or  the  same.  Hence: 
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VTj  G  T,  Vs  G  {1..5,}, Vtj  G  r,  Vs'  G  {l..Sy}  s.t.j  i: 

Clexeci  s  j  —  Cy  prec(s'  j)  •  ^i,s,j,prec(s',j)  (15b) 

Let  NCIexecf's  j  denote  the  interference  of  task  Tj  on  sth  segment  of  task  T;  for  the  case  that  s  ’  is 
as  mentioned  above.  NCIexecfs  j  can  be  expressed  as  a  sum  of  terms  where  each  term  is  of  a 
segment  of  task  t j.  Hence: 

vtj  g  r, vs  g  {l.-Sj}, Vxy  g  r, vs'  g  {i. . sy}  s. t.y  v  l 

NCIexec-  'sj  =  Hs„6{i..s}  NCIexectermf'SjS„  (16) 

Each  of  these  terms  can  be  expressed  by  counting  the  number  of  jobs  of  segment  s"  of  task  Tj  that 
impacts  the  response  time  of  a  job  of  segment  s  of  task  X;  for  the  case  that  s  ’  is  as  mentioned 
above.  Hence: 


Vx;  G  T, Vs  G  {l..Sj},Vx7-  G  T, Vs'  G  {l..Sy},  Vs"  G  {l..s;)  s. tj  i: 

NCIexectermf'S  jS,,  =  njobsf'SjSII  ■  Cj  Sl,  ■  xisjiS„  (17) 

Considering  that  the  s"th  segment  of  t y  may  arrive  at  or  later  than  the  time  that  segment  s  of  task 
Tj  arrives  gives  us: 

VXj  G  T,  Vs  G  {l.-Sj},  Vx;-  G  T,  Vs'  G  {l..s;-},  Vs"  G  {l. . s;}  s. t.  (j  ^  i)  A  (s"  >  s'): 

rwIj,-(0,,s„_  i — 1  )1 


nj°bstsj,: 


sr  _ 


(18) 


Considering  that  the  s"tn  segment  of  r j  may  arrive  before  the  time  that  segment  s  of  task  T; 
arrives  gives  us: 

VXj  G  T,  Vs  G  {1.  .Sj),  Vx;-  G  r,  Vs'  G  {1. .  Sj],  Vs"  G  {l. .  S7}  s.t.  (j  i)  A  (s" 
<  s'  —  1): 


nj°bsi,'s,j,s 


wi,s  (T  j  1  Qj.sn- 1)) 


(19) 


If  values  of  0  and  y  are  given,  then  determining  feasibility  of  these  constraints  is  equivalent  to 
determining  if  the  taskset  is  schedulable.  If  0  and  y  are  not  given,  then  determining  feasibility  of 
these  constraints  is  equivalent  to  determining  if  there  exists  a  configuration  of  0  and  priorities  that 
makes  the  taskset  schedulable.  These  constraints  are  not  MILP  expressions  but  they  can  be 
rewritten  to  MILP  expressions  (a  problem  for  which  many  tools  are  available).  We  have  rewritten 
them  to  MILP  (see  Appendix  6  and  B  )  and  used  Gurobi  (a  state-of-the-art  MILP  solver)  to  create 
a  tool  for  exact  schedulability  analysis  and  optimal  configuration  of  0  and  priorities. 


4.2  Fast  Deadline  and  Phase  Assignment  using  Heuristics 

Although  the  optimal  priorities  and  phases  can  be  obtained  using  the  above-mentioned  method, 
the  execution  time  of  the  algorithm  tends  to  grow  rapidly  with  the  number  of  tasks  and  segments. 
To  overcome  this,  we  propose  four  heuristics  in  this  subsection.  The  high-level  ideas  are  (1) 
taking  into  account  only  available  CPU  time  for  a  task  after  subtracting  suspension  time  from  its 
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deadline,  (2)  distributing  its  slack  to  each  segment  based  on  computation  demands,  (3)  assigning  a 
segment  a  deadline  with  a  phase,  and  (4)  scheduling  each  segment  using  Deadline-Monotonic 
Scheduling  (DMS).  The  four  heuristics  are  about  how  to  distribute  the  slack  of  a  self-suspending 
task  to  assign  a  segment  a  deadline,  hence  assigning  the  segment  a  priority. 

Algorithm  3:  ED(r) 

Input:  T:  a  set  of  n  self-suspending  tasks 
Output:  A:  a  set  of  segment  level  relative  deadlines 
Output:  <t>:  a  set  of  segment-level  phase  offsets 
1 :  for  t  =  1  to  n  do 

2:  t>  Calculate  the  actual  amount  of  CPU  time  for  t,  with  the  suspension-time  consideration. 

3:  Di  —  Di-Gi 

4:  0i,o  :=  0 

5:  A  :=  0 

6:  (P:=  0 

7:  for  j  —  1  to  Si  —  1  do 

C-  • 

8:  t>  Assign  t ij  Dtj  so  thatVj,  is  all  the  same. 

9:  Dij  ■=  :=  (pij_ i  +  Dij  +  Gtj 

10:  A:=Au  {Di  j},  ch  :=  O  u  {fu} 

1 1  •  —  Di  +  Gi  —  1,  A  —  A  vj  {  Di  s.  } 

12:  return  A  and  <f> 


To  effectively  show  how  the  algorithms  work,  we  introduce  a  few  new  notations.  Since  we  want 
to  assign  intermediate  segment-level  deadlines  to  determine  the  priorities  of  task  segments,  we  let 
Di  j  denote  the  segment-level  deadline  of  tL  j  relative  to  its  release  time  that  is  represented  as 

Then,  we  define  a  segment  density  Vy  as  the  ratio  of  the  worst-case  execution  time  of  the 

task  segment  to  the  task  period.  We  also  define  UTot  as  Hf=1  ~^r,  which  is  the  total  utilization  of 

the  jth  segments  of  all  tasks.  We  use  these  terms  to  define  the  following  heuristics. 

•  ED  (Equal  Density):  Assign  tl j  a  segment  deadline  so  that  all  segment  densities  for  T;  are 

same.  In  other  words,  there  is  a  certain  value  v,-  ,■  =  —  =  —  =  ■  ■  ■  =  ~^L. 

l’J  Djj  dU2  Dis. 
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•  MTD  (Minimize  Total  Density):  Assign  Ty  a  segment  deadline  so  that  the  total  density  for 
Tj  is  minimized.  That  is  to  find  D;  ,  s  that  minimize  £/l=1  — . 

•  ES  (Equal  Slack):  Assign  t y  a  segment  deadline  so  that  Di  ±  —  Ct  l  —  Di2  —  Ci2  =  •••  = 

Dj  si  —  Cy.  is  satisfied. 

•  PS  (Proportional  Slack):  Assign  Ty  a  segment  deadline  so  that  V/  G  {/ 1 1  <  /  <  Si,j  G 
Z+},Dj;-  -  Cij:  Dij+1  —  Ci  J+1: :  t/y:  Ui  j+1  is  satisfied. 

Outputs  of  the  heuristics  are  a  set  of  segment  deadlines  that  will  determine  priorities  of  task 
segments  under  DMS  policy.  The  shorter  the  relative  deadline  is,  the  higher  the  priority  is.  The 
release  phases  are  determined  based  on  the  segment  deadline.  For  example,  if  tL  j  is  assigned  a 
segment  deadline  Dy,  the  release  phase  for  t  y+1  is  0y_  1  +  Dtj  +  Gij.  One  of  the  heuristic 
implementations  are  presented  in  an  algorithmic  format  in  Algorithm  3  that  has  0(Hf=1  .■?;) 
complexity. 
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5  Related  Work 


Previous  work  related  to  task-fixed  priority  scheduling  with  suspension  includes  [8],  [24],  [3], 
[25],  and  [14].  Ridouard,  et  al.  [24], [25]  proved  that  the  problem  of  scheduling  real-time  tasks 
with  self-suspension  is  NP-Hard  in  the  strong  sense.  In  [8],  the  authors  presented  a  comparison 
between  two  multi-processor  priority  inheritance  protocol  (MPCP  and  MSRP)  where  tasks  could 
suspend  waiting  for  a  remote  lock.  In  this  work  the  authors  highlighted  the  different  approaches  to 
deal  with  this  suspension.  In  MPCP,  a  task  waiting  for  a  global  lock  was  allowed  to  suspend, 
allowing  lower-priority  tasks  to  run,  and  a  period-enforcement  was  used  to  avoid  jitter  [23].  In 
MSRP,  on  the  other  hand,  a  busy  wait  was  used  and  no  lower-priority  tasks  were  allowed  to  run. 

In  our  work,  we  also  use  a  period  enforcement  mechanism  to  avoid  jitter  in  the  suspension,  but 
each  segment  (e.g.  before  and  after  the  suspension)  is  given  a  different  priority  according  to 
different  schemes  of  segment  deadline  assignments.  In  [3],  the  authors  analyzed  the  execution  of 
tasks  with  segments  running  in  a  local  processors  and  segments  running  on  remote  co-processors 
that  could  be  seen  as  a  suspension  in  the  local  processor.  In  this  case  the  authors  bounded  the 
suspension  with  a  minimum  and  maximum  and  provided  a  recurrence  equation  to  find  the  worst- 
case  interference  that  a  task  could  suffer  from  higher-priority  ones  with  a  number  of  these 
segments.  In  contrast,  in  our  work  we  provide  a  schedulability  bound  for  tasksets  with  only  the 
highest-priority  task  with  suspensions  while  using  a  generalized  task  model  with  suspensions 
where  each  segment  is  assigned  its  own  priority.  The  period  enforcement  of  offsets  allows  us  to 
provide  improved  schedulability. 

In  [14],  the  authors  analyzed  the  fixed-priority  scheduling  of  tasks  with  self-suspension. 
Specifically,  the  authors  characterized  the  critical  instant  of  self-suspending  task  under  the 
influence  of  non-suspending  sporadic  tasks  and  developed  a  response  time  test.  They  also 
provided  two  execution  control  policies  that  transformed  the  interference  of  high-priority 
suspending  tasks  into  that  similar  to  non-suspending  ones  to  be  able  to  use  their  response-time  test 
with  these  tasks.  In  contrast,  we  develop  a  schedulability  bound  for  a  taskset  where  the  higher- 
priority  is  a  self-suspending  task  and  develop  a  response-time  test  for  suspending  tasks  where 
each  segment  can  be  assigned  different  priorities  and  release  enforcement. 

The  schedulability  of  self-suspending  tasks  has  also  been  studied  for  soft  real-time  guarantees, 
both  for  a  model  where  the  suspension  is  caused  by  a  GPU  and  the  GPU  is  treated  as  a  shared 
resource  [7]  and  for  a  general  model  where  the  actual  cause  of  suspension  is  not  specified  [15]. 

In  [27],  the  author  presented  a  schedulability  analysis  for  tasks  with  offsets.  These  offsets  were 
used  to  synchronize  the  release  of  groups  of  tasks  that  synchronized  within  the  group  (known  as 
transactions).  In  [20],  the  authors  extended  this  work  to  allow  offsets  and  deadlines  to  go  beyond 
periods  improving  the  schedulable  utilization.  The  efficiency  of  the  response  time  analysis  in  this 
model  was  then  further  improved  in  [18].  These  papers  have  some  similarities  with  the  use  of 
offsets  between  segments  in  tasks  in  our  model;  however,  we  start  with  suspension  intervals  that 
separate  task  segments  from  where  we  derive  intermediate  deadlines  that  in  turn  allows  us  to 
assign  per-segment  fixed  priorities. 
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In  [21],  the  authors  developed  another  schedulability  analysis  for  tasks  with  offsets.  However, 
this  case,  the  analysis  assumes  EDF  scheduling  and  the  results  cannot  be  applicable  to  fixed- 
priority  tasks. 
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6  Conclusion 


We  have  provided  schedulability  analyses  and  proposed  a  new  method  called  segment-fixed 
priority  scheduling  for  self-suspending  tasks.  We  have  identified  a  condition  that  allows  us  to 
leverage  the  conventional  task-fixed  priority  scheduling  such  as  Rate-Monotonic  Scheduling 
(RMS);  however,  the  condition  is  narrow,  and  RMS  is  shown  to  not  be  the  optimal  scheduler  in 
many  cases  for  self-suspending  tasks.  This  is  mainly  caused  by  (1)  reduced  available  CPU  time 
due  to  self-suspension  and  (2)  unknown  suspension  time  during  run-time.  In  order  to  improve 
performance,  we  utilize  segment-level  priority  assignment  and  phase  enforcement.  To  determine 
the  priority  and  phase  per  task  segment,  we  have  proposed  the  MILP -based  method  and  four 
heuristics.  The  heuristics  could  also  be  complementary  to  the  MILP -based  method  because  they 
do  not  require  significant  CPU  time  to  get  the  results.  For  example,  one  of  the  proposed  heuristics 
has  0(Zi= i  si)  complexity.  A  quick  check  can  be  done  by  using  heuristics,  and  the  MILP -based 
method  can  be  used  if  needed.  This  technique  can  also  be  used  on  a  real  system  [11],  [12]  so  that 
special-purpose  processors  can  be  used  in  a  predictable  and  analyzable  way. 
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Appendix  A.  Rewriting  to  almost  MILP 


Note  that  among  the  constraints  in  Section  4.1,  some  constraints  are  non-linear  (Equation 
Error!  Reference  source  not  found,  uses  logical  operators;  Equation  ( 1 5)  uses  the  max-function; 
Equation  ( 1 7)  uses  quadratic  expressions;  Equation  ( 1 8)  and  Equation  ( 1 9)  use  the  ceiling 
function)  and  hence  this  formulation  is  not  a  MILP.  We  can  rewrite  them  though.  It  can  be  seen 
that  the  implication  in  Equation  Error!  Reference  source  not  found,  can  be  rewritten  as: 

Vx;  G  r,  Vt;-  G  T,  Vs  G  {1,2,  Vs"  G  {l..sy},  Vp  G  {1 .  .maxprio}, 

Vp"  G  {1  ..maxprio]  s.  t.  (j  V  i)  A  (p  <  p'):  yiAP  +  ~  xi,s,j,su  <  1  (20) 

Equation  (15)  can  be  rewritten  as: 

VTj  G  T,  Vs  G  {l..Sj},  Vx;  G  T  s.t._/  V  i: Zs/e{i,2 s  }  decisionmaxf  ' j  =  1  (21) 

VXj  G  T,  Vs  G  {1..S;},  Vx;  G  T,  Vs'  G  {l..s;}  s.t.y  V  i: 

(decisionmaxf  j  =  1)  =>  (Clexecf's  j  +  NCIexec-'sj  >  Iisj )  (22) 

VXj  G  x, Vs  G  {l..S[}, Vx;-  G  T,  Vs'  G  {1, . . Sj}  such  that  j  V  i: 

CIexec('S  j  +  NCIexec('s  j  <  Iis  j  (23) 

where  decisionmaxf' j  G  {0,1}. 

Equation  ( 1 7)  can  be  rewritten  as: 

Vx;  G  T,  Vs  G  {l..Si},  Vx;  G  T,  Vs'  G  {l..Sy}, Vs"  G  {l. . Sj}  s. t.)  V  i\ 

( xi,s,j,sn  =  0)  =>  (NCIexectermf's j  sr,  =  0)  (24) 

VXj  G  T,  Vs  G  {1..S;},  Vx;  G  T,  Vs'  G  {l..Sy}, Vs"  G  {l. . s;}  s. t.)  V  i: 
ixi,s,j,s'i  =  1)  =>  ( NCIexectermf's j s„  =  njobsfSjSII  ■  Cjs,,)  (25) 

Consider  the  constraint: 

Vx;  G  T,  Vs  G  {1. .  sj,  Vx;-  G  T,  Vs'  G  {l. .  Sy},  Vs"  G  {1. .  Sj]  s.  t.  0  4  i)  A  (s"  >  s') : 

Wi,s  -  (<pj,sn-i  -  0;>-i)  ^  Tj  •  njobsfS  jSII  (26) 

It  can  be  seen  that  ( 1 8)  and  (26)  are  different.  It  can  be  seen,  however,  that  replacing  Equation 
( 1 8)  with  Equation  (26)  does  not  impact  feasibility. 

Consider  the  constraint: 

VXj  G  r,  Vs  G  {1,2,  ...,Si},Vxy  G  r,Vs'  G  {l..sy},Vs"  G  {l..sy} 
s.  t.  (J  4  i)  A  (s"  <  s'  —  1): 

Wi.s  -  -  0;>- i)  ^  Tj  ■  njobsf's  js„  +  Tj  (27) 
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It  can  be  seen  that  ( 1 9)  and  (27)  are  different.  It  can  be  seen,  however,  that  replacing  Equation 

( 1 9)  with  Equation  (27)  does  not  impact  feasibility. 

Hence,  determining  feasibility  of  Equation  (8),  (9),  (10),  (11),  (20),  (13),  (14),  (21),  (22),  (23), 
(15b  ), (16),  (24),  (25),  (26),  (27)  is  equivalent  to  an  exact  schedulability  test. 

This  set  of  constraints  is  still  not  an  MILP  formulation,  but  it  can  be  rewritten  to  an  MILP 
formulation  using  standard  techniques  —  see  Appendix  B. 

Let  us  now  define  four  problems: 

PROB1:  Assuming  T,D,C,G  values  are  given  and  assuming  that  that  y  and  0  values  are  given, 
find  an  assignment  of  values  to  variables  that  satisfies  the  constraints  Equation  (8),  (9),  (10),  (11), 

(20) ,  (13),  (14),  (21),  (22),  (23),  (15b), (16),  (24),  (25),  (26),  (27) 

PROB2:  Assuming  T,D,C,G  values  are  given  and  assuming  that  y  values  are  given,  find  an 
assignment  of  values  to  variables  that  satisfies  the  constraints  Equation  (8),  (9),  (10),  (1 1),  (20), 
(13),  (14),  (21),  (22),  (23),  (15b),  (16),  (24),  (25),  (26),  (27) 

PROB3:  Assuming  T,D,C,G  values  are  given  and  assuming  that  0  values  are  given,  find  an 
assignment  of  values  to  variables  that  satisfies  the  constraints  Equation  (8),  (9),  (10),  (1 1),  (20), 
(13),  (14),  (21),  (22),  (23),  (15b),  (16),  (24),  (25),  (26),  (27) 

PROB4:  Assuming  T,D,C,G  values  are  given,  find  an  assignment  of  values  to  variables  that 
satisfies  the  constraints  Equation  (8),  (9),  (10),  (11),  (20),  (13),  (14),  (21),  (22),  (23),  (15b),  (16) 
,  (24),  (25),  (26),  (27) 

It  can  be  seen  that  solving  PROB 1  is  an  exact  schedulability  test.  The  other  ones 
(PROB2,PROB3,PROB4)  are  configuration  algorithms  that  find  0  and/or  priority  assignment  so 
that  deadlines  are  met  if  such  an  assignment  exist.  We  have  developed  a  tool  that  performs  these 
calculations  using  Gurobi — a  state  of  the  art  MILP  solver. 

Note  that  if  we  want  to  perform  schedulability  analysis,  we  can  determine  feasibility  of  PROB  1  in 
a  manner  similar  to  response  time  calculations  as  follows  and  this  can  be  performed  with  low 
time-complexity.  A  lower  bound  on  wi  s  is  Ci  s  (using  Equation  (14))  and  this  lower  bound  on 
wis  can  be  used  to  obtain  a  lower  bound  on  njobsf'S  jsn  (using  Equation  ( 1 8)  and  Equation  ( 1 9)) 
which  in  turn  gives  us  a  lower  bound  on  NCIexectermf'sj  s„  (using  Equation  (17))  which  in  turn 
gives  us  a  lower  bound  on  NCIexec-  's  j  (using  Equation  (16))  which  in  turn  gives  us  a  lower 
bound  on  Ii  sj  (using  Equation  ( 1 5))  which  in  turns  gives  us  a  new  lower  bound  on  wi  s  (using 
Equation  (14)).  If  this  new  lower  bound  of  wi  s  is  equal  to  the  previous  lower  bound  on  wi  s  then 
stop;  otherwise  repeat  this  procedure  to  obtain  a  new  lower  bound  on  wi  s. 

Keep  iterating  like  this  for  all  tasks  and  for  all  segments.  If  we  get  convergence,  then  use  these 
values  in  Equation  (14)  to  get  upper  bounds  on  response  times  (using  Equation  (13))  and  then 
plug  it  in  to  Equation  (11);  if  Equation  (11)  is  satisfied  then  PROB1  is  feasible  for  this  taskset.  If 
we  have  convergence  but  Equation  (11)  is  not  satisfied,  then  PROB1  is  not  feasible  for  this 
taskset.  If  there  is  one  task  with  a  segment  for  which  we  do  not  have  convergence  and  during  one 
of  these  iterations,  this  lower  bound  on  wi  s  exceeds  then  PROB  1  is  not  feasible  for  this 
taskset.  It  can  be  seen  that  for  each  iteration,  a  new  segment  is  included  and  hence  the  time- 
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complexity  of  this  approach  for  determining  feasibility  of  PROB 1  is  pseudo-polynomial.  Hence, 
this  procedure  is  a  schedulability  test  with  pseudo-polynomial  time-complexity. 
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Appendix  B.  Rewriting  to  MILP 


Note  that  among  the  constraints  in  Section  4.1,  some  constraints  are  non-linear.  Appendix  A 
provides  rewriting  of  these  constraints  so  that  the  resulting  constraints  are  almost  a  MILP 
formulation.  In  this  appendix,  we  will  take  the  final  step  and  rewrite  it  to  a  MILP  formulation. 
When  doing  this  rewriting,  we  let  DM  AX  be  defined  as  DM  AX  —  maxf=1D(.  Then,  our  MILP 
formulation  is  as  follows: 

Constraints 


VT;  g  r:  0iiO  =  0 

VT;  G  r,  Vs  G  {1. .  Si  -  1}:  -  0£>s  <  0 

maxprio 

Vt£  G  T, Vs  G  {1..S;}:  ^  yitSjP  =  1 

p= i 

VT;  G  r,Vs  G  {l..s£  -  1}:%  -  <pLs  <  —Gis 
Vt£  G  T:RiiS.  <  Di 

Vx ;  G  T,  Vx;-  G  T,  Vs  G  {1..S;},  Vs"  G  {1  ..s^},  Vp  G  {1 .  .maxprio}, 
Vp'  G  {1. .  maxprio }  s.t.  O'  *  0  A  (p  <  p'): yUp  +  y]jS„,p,  ~  Hs,j,s»  ^  1 
Vx£  G  r,  Vs  G  {1. .  sj:  /?iiS  -  0£iS_i  -  wi}S  =  0 

Vt£  G  L  Vs  G  {1. .  St):  wiiS  +  ^  (— 0,s,y)  = 

TjETAj^i 

VTj  G  r,Vs  G  {1..S;}, Vx;-  G  rs.to  A  i:  ^  decisionmaxf' j  =  1 

S'6{1,2,...,S;} 

VXj  G  T, Vs  G  {1..S;}, Vx;-  G  T, Vs'  G  {l..s;)s. t.j  A  i: 

Clexecf's  j  +  NCIexecf'Sj  —  Iisj  <  0 
VXj  G  T, Vs  G  {l..Sj}, Vx;-  G  T, Vs'  G  {l..s;)s. t.j  A  i : 
h,s,j  ~  CIexeci,s,j  ~  NCIexecfs  j  +  DM  AX  ■  decisionmaxf' j  <  DMAX 
VXj  g  r,vs  g  {i..s;}, vx;-  g  r, vs'  g  {i..s;}s. t.j  a  l 
Clexeci  sj  —  Cj  prec(s' j)  •  3h,s,j,prec(s',j)  —  ^ 
vx;  g  r,vs  g  {i..s;}, vx;-  g  r, vs'  g  {i..s;)s. t.j  a  l 
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NCIexecf's  j  +  ^  (— NCIexectermf's  j  s „)  =  0 

S"6{l..Sy} 

VTj  g  r,vs  e  {l. . 5j}, Vxy  g  r,  vs'  g  {i..s;},  vs"  g  {l. . sj]  s. t.j  i-. 

NCIexectermf'Sj  Sl,  ~  DM  AX  ■  xiSjiSn  <  0 
VTj  G  r,VS  G  {1..S;},  VXy  G  T,  Vs'  G  {l..Sy},  Vs"  G  {l. .  Sj]  S.  t.j  ^  i\ 

NCIexectermffsjs,,  ~  Cj,s,i  ■  nj°bsf'SjSI,  +  DM  AX  ■  xisjsll  <  DM  AX 
VXj  G  r,  Vs  G  {l..Si},  VXy  G  r,  Vs'  G  {l..Sy},  Vs"  G  {l. .  Sj]  s.  t.j  i: 
NCIexectermf's] ,sn  ~  Cj,s"  '  nj°bsf,'s,j,sn  ~  DM  AX  ■  xiiSljlSn  ^  —DM  AX 
VXj  G  T,  Vs  G  {l.-Sj},  Vx;-  G  T,  Vs'  G  {l..Sy},  Vs"  G  {1. . Sj}s. t.  (j  ^  i)  A  (s"  >  s'): 

Tj  •  njobsf'sjsn  +  <pj,s„- 1  -  0;>- 1  ~  Wj,s  ^  0 
VXj  G  r,  Vs  G  {1.  .S;},  VXy  G  r,  Vs'  G  {l.  .  Sy},  Vs"  G  {1..  Sy}  S.  t.  (j  V  l)  A  (s"  <  s'  —  1): 
Tj  ■  njobsf  ’s  j  sn  +  </>;>,-!  ~  1  -  WijS  >  ~Tj 

Domains 

yup  ^  {0,1} 

xi,s,j,s"  ^  {0,1} 

decisionmaxf' j  G  {0,1} 

njobsf  'sjsn  is  a  non-negative  integer. 

Other  symbols  are  non-negative  real  numbers. 
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